Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/847e780e-a401-36ae-9b76-b944d1666e3e.roa
File:                     847e780e-a401-36ae-9b76-b944d1666e3e.roa (raw, json)
Hash identifier:          NZPUBQrcfmOpDwUfHVfVKXP7DU5cGpzqKgTg2Wse51o=
Subject key identifier:   2A:B4:15:E4:C4:DA:EC:29:0D:64:38:38:E8:5C:79:7F:B1:C1:A6:1D
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584F497671746B5E31D1BCF02980
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/847e780e-a401-36ae-9b76-b944d1666e3e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26327
IP address blocks:        173.246.218.0/23 maxlen: 24
                          173.246.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:71:74:6b:5e:31:d1:bc:f0:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=becfa35f-915b-483e-aa48-791b57ca3377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:43:6d:e1:c4:ca:85:d4:dd:80:5f:05:fa:7f:
                    9f:79:1c:1f:91:de:8b:61:23:e4:e2:77:20:47:68:
                    66:9b:01:6a:00:27:fe:17:3b:45:5c:d0:92:68:55:
                    85:28:dd:9c:34:2d:39:88:00:aa:ef:5b:95:d8:96:
                    38:53:28:0e:f5:d6:62:47:64:ec:ba:64:b2:5f:d4:
                    59:86:74:78:35:f3:34:0e:df:fc:1f:79:7f:dd:9a:
                    59:f0:b7:c2:61:80:f2:39:7c:dc:c8:cf:ff:0b:19:
                    7c:0b:66:cb:88:d2:0d:8b:39:89:b3:9b:24:e2:51:
                    1d:aa:2b:11:02:aa:97:68:a4:83:53:4e:90:c2:d5:
                    56:bc:1a:c3:79:2c:2a:8a:a5:84:2f:0e:7d:7c:b1:
                    00:8f:b3:45:b4:ac:e3:b9:a2:c8:02:cb:f8:6d:8b:
                    c8:56:e8:da:3e:88:34:51:97:5a:79:a4:b6:dc:5f:
                    9f:2b:46:bd:89:b4:1c:f3:9b:c3:80:03:87:bc:6e:
                    f1:8c:f8:8d:32:a5:cf:6e:6a:31:cb:fe:26:1e:f5:
                    6f:27:d2:7a:46:df:29:6b:1d:f1:97:1a:78:38:8c:
                    7a:42:31:ca:25:b1:e3:0c:0b:dc:8e:c1:74:72:a6:
                    83:5f:4a:19:90:10:6d:30:cb:a6:c4:3f:8c:39:dc:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B4:15:E4:C4:DA:EC:29:0D:64:38:38:E8:5C:79:7F:B1:C1:A6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/847e780e-a401-36ae-9b76-b944d1666e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.218.0-173.246.221.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:af:04:22:a8:9a:ec:22:cf:66:2f:d8:96:be:c6:3b:a3:
         4d:29:98:5f:13:54:b2:37:08:e5:ed:74:28:9b:2b:cb:1b:26:
         cb:7d:4d:a7:69:bb:5e:f5:f4:85:5c:aa:e2:22:87:29:74:da:
         58:e9:25:10:5e:a4:c9:d0:11:e5:3b:8b:73:54:03:21:ac:c2:
         16:8c:6f:35:80:0c:ba:74:fa:ff:56:a4:bd:c0:bd:4f:40:00:
         31:9f:81:eb:8f:5c:4c:df:32:41:76:7c:e2:cb:5e:66:70:7b:
         97:ef:e7:07:09:ea:57:4f:6d:6d:89:50:e9:1e:e4:d4:58:47:
         fc:c3:02:60:0a:4e:b7:3e:42:e1:71:10:cc:32:e6:a0:d7:b7:
         c9:ae:8d:5f:47:17:dc:3d:42:08:52:81:59:fa:4d:a3:36:a3:
         df:5b:0c:0d:99:1b:ce:f7:58:e9:ec:51:0a:eb:71:d4:76:4c:
         5d:fb:9c:06:85:96:4c:43:35:da:19:00:f5:ed:63:fa:56:23:
         de:0c:39:c0:c3:65:f0:e1:89:fd:c5:d3:38:7c:69:5d:80:bc:
         ef:2f:fa:be:4f:d3:6f:c9:4b:6f:87:c9:aa:48:9d:9e:28:3a:
         5b:9a:3e:6f:9e:dd:ef:94:35:a5:67:34:24:cc:e5:5a:83:50:
         68:5f:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:27:26 2026 by rpki-client